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The following claims are presented for examination: 

1. (Withdrawn) A method comprising: 

receiving a protocol data unit that comprises a destination address; and 
transmitting an alarm when said destination address is not associated with a secure 
access server. 

2. (Withdrawn) The method of claim 1 wherein said destination address is a data 
link layer address. 

3. (Withdrawn) The method of claim 1 wherein said destination address is a 
network layer address. 

4. (Withdrawn) The method of claim 1 wherein said destination address is 
associated with a device that is associated with: (i) a network layer address in a first 
network, and (ii) a network layer address in a second network, wherein said first network 
and said second network are different. 

5. (Withdrawn) The method of claim 4 wherein said alarm comprises at least one of 
(i) said network layer address in a first network, and (ii) said network layer address in a 
second network. 

6. (Withdrawn) A method comprising: 

(a) receiving a protocol data unit that comprises a data link layer destination address 
and a network layer destination address; and 

(b) transmitting an alarm when: 

(i) said data link layer destination address is not associated with a secure 
access server, and 

(ii) said network layer destination address is not associated with said secure 
access server. 

7. (Withdrawn) The method of claim 6 wherein said data link layer destination 
address is associated with a device that is associated with: (i) a network layer address in a 
first network, and (ii) a network layer address in a second network; and 

wherein said alarm comprises at least one of (i) said network layer address in a first 
network, and (ii) said network layer address in a second network. 

8. (Withdrawn) A method comprising: 
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receiving in a first network a protocol data unit that comprises a network layer 
destination address; and 

transmitting an alarm when said network layer destination address is a network layer 
address in a second network. 

9. (Withdrawn) The method of claim 8 wherein said protocol data unit further 
comprises a data link layer destination address; 

wherein said data link layer destination address is associated with a device that is 
associated with: (i) a network layer address in a first network, and (ii) a network layer 
address in a second network; and 

wherein said alarm comprises at least one of (i) said network layer address in a first 
network, and (ii) said network layer address in a second network. 

10. (Withdrawn) A method comprising: 

receiving a first protocol data unit that comprises a data link layer destination 
address and a first network layer destination address; 

receiving a second protocol data unit that comprises said data link layer destination 
address and a second network layer destination address; and 

triggering an alarm when said data link layer address is different than the data link 
layer addresses of all authorized routers and said first network layer destination address is 
different than said second network layer destination address. 

11. (Withdrawn) The method of claim 10 wherein said data link layer destination 
address is associated with a device that is associated with: (i) a network layer address in a 
first network, and (ii) a network layer address in a second network; and 

wherein said alarm comprises at least one of (i) said network layer address in a first 
network, and (ii) said network layer address in a second network. 

12. (Withdrawn) A method comprising: 

receiving a protocol data unit that comprises a data link layer destination address 
and a network layer destination address; and 

triggering an alarm when said data link layer destination address is associated with a 
different device than is said network layer destination address. 

13. (Withdrawn) The method of claim 12 wherein said data link layer destination 
address is associated with a device that is associated with: (i) a network layer address in a 
first network, and (ii) a network layer address in a second network; and 



- 4 - 



Serial No. 10/757676 



Attorney Docket: 630-053US 
Avaya Docket: 503025-A-01-US 



wherein said alarm comprises at least one of (i) said network layer address in a first 
network, and (ii) said network layer address in a second network. 

14. (Original) A method comprising: 
deploying a first station in a first network; 

deploying a server in a second network connected to said first network through a 
secure access server; 

transmitting from said first station a protocol data unit addressed to a second station 
in said first network, wherein said protocol data unit comprises an address of said server; 
and 

triggering an alarm if said protocol data unit is received at said server. 

15. (Original) The method of claim 14 wherein said protocol data unit further 
comprises a network layer source address of said second station; and 

wherein said alarm comprises said network layer source address. 

16. (Original) The method of claim 15 further comprising obtaining the wireline 
network port number corresponding to said network layer source address. 

17. (Original) The method of claim 16 further comprising disabling the network 
jack associated with said wireline network port number. 



